html-to-markdown/.github/workflows/publish-pubdev.yaml at main · kreuzberg-dev/html-to-markdown · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
name: Publish pub.dev

# pub.dev OIDC trusted publishing rejects tokens originating from `release`
# events; only `push` and `workflow_dispatch` are accepted.
#
# The main `publish.yaml` workflow cannot directly publish to pub.dev when
# triggered by the GitHub release event. Instead, it dispatches this workflow
# with the run_id of the main workflow, and this workflow downloads the
# `dart-package-assembled` artifact from that run.
#
# One-time setup: on pub.dev → html_to_markdown package → Admin → Automated publishing,
# set the workflow path to `.github/workflows/publish-pubdev.yaml`.

on:
  workflow_dispatch:
    inputs:
      run_id:
        description: "GitHub Actions run ID of publish.yaml that produced the dart-package-assembled artifact"
        required: true
        type: string

permissions:
  contents: read
  id-token: write
  actions: read

jobs:
  publish-pub:
    name: Publish pub.dev
    runs-on: ubuntu-latest
    steps:
      - uses: actions/download-artifact@v8.0.1
        with:
          name: dart-package-assembled
          path: packages/dart
          run-id: ${{ inputs.run_id }}
          github-token: ${{ secrets.GITHUB_TOKEN }}

      - uses: kreuzberg-dev/actions/publish-pub@v1
        with:
          package-dir: packages/dart